Inactive Users Tracker automates the management of inactive user accounts. The program periodically checks user accounts in specified domains, reports to you, and automatically disables all accounts inactive for more than a specified number of days.
Features: Tracking inactive user accounts is a good security policy. Some one can get an account created and not use it for a while. But he prefers to leave it as an entry point to the system for malicious activity. When people leave the organization or are retired, usually the primary account is disabled but the other accounts may not be tracked by HR department. That leaves a potential for subversion later on. Many corporate security policies require that Active Directory user accounts must be disabled after 31 days of inactivity. Usually a policy like that would help keep the Active Directory clean and secure. Tracking inactive accounts is a good way of weeding out such potentially problematic inroads into the Active Directory and the IT system of the organization.
Inactive Users Tracker automates the management of inactive user accounts. The program periodically checks all user accounts in specified domains, reports to you, and automatically disables all accounts inactive for more than a specified number of days. To detect inactivity, the tool checks the "lastLogon" attribute of every account, which represents the last time a user was authenticated by a specific DC. It queries all DCs in the domain and uses the most recent logon time, also called the "true last logon". The reporting feature allows administrators to quickly analyze unused accounts and prevent break-ins into enterprise networks. Major regulatory compliance regulations, such as SOX, HIPAA, and PCI, and government regulators such as FDIC require implementation of policies against unauthorized use. The product helps to implement these policies and create reports for the regulatory bodies. The product is very easy to install and use, requiring just a few simple steps to get it working.
Overall: Automates a vital function. Typically this inactivation of account never gets done properly in most organizations for various reasons.